$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db99b4f2-cc5b-36e4-aaa2-b7f36f46f149.roa File: db99b4f2-cc5b-36e4-aaa2-b7f36f46f149.roa (raw, json) Hash identifier: lTrMrtUIDv3RZhwj73WryvTF5rRkbe6FlrRYEqcPK2k= Subject key identifier: B7:DB:81:F9:9A:9A:1C:9A:33:38:40:86:B0:4C:B1:E9:EB:A4:25:E7 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B5F376D754E18C3266B0BF520 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db99b4f2-cc5b-36e4-aaa2-b7f36f46f149.roa Signing time: Wed 01 Oct 2025 01:00:32 +0000 ROA not before: Wed 01 Oct 2025 01:00:32 +0000 ROA not after: Tue 30 Dec 2025 02:00:32 +0000 asID: 15169 IP address blocks: 104.154.224.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5f:37:6d:75:4e:18:c3:26:6b:0b:f5:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Oct 1 01:00:32 2025 GMT Not After : Dec 30 02:00:32 2025 GMT Subject: CN=43f77ba8-0d30-483a-ac5b-306d7dc19777 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:cc:a0:24:d7:20:97:13:fa:8a:61:14:46:c0: 6f:40:2a:c8:ec:d5:e0:b3:72:17:0b:7e:c7:74:4b: eb:cc:77:e2:f4:7e:39:6c:83:81:19:f8:f5:7c:de: 3f:96:87:08:bf:1e:42:12:0a:00:5e:bf:0b:cc:d0: d3:2d:f7:95:e1:84:27:86:6e:07:2d:9c:65:16:d4: cc:9c:ef:c7:e4:ab:ad:28:3e:ca:0c:49:ab:3a:51: 3a:d9:89:33:0e:72:94:f6:49:79:83:55:75:2b:23: 51:d6:7b:7e:18:f4:35:df:8e:4c:1c:59:24:e5:b5: e2:c0:74:00:66:7e:38:66:3a:3d:42:be:8c:73:73: 2c:35:8e:e1:90:27:7d:93:62:ea:04:bd:34:68:bf: 16:8b:55:93:e1:d0:5f:35:c0:a0:aa:6e:cf:d4:e4: 9a:fe:48:e1:47:96:a1:1e:15:18:ee:95:19:d6:41: e4:63:10:21:38:08:05:e9:62:1b:dd:54:0d:b0:64: e5:27:4a:c2:b7:39:96:d4:55:11:73:16:e4:c9:c5: 55:a4:54:09:44:7b:59:06:4f:5a:78:3e:68:16:40: 8d:f9:36:c3:34:16:cb:70:88:6f:38:a4:a0:17:ec: 5a:40:5d:b8:08:ef:32:d0:1f:35:09:87:1f:20:4c: 65:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:DB:81:F9:9A:9A:1C:9A:33:38:40:86:B0:4C:B1:E9:EB:A4:25:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/db99b4f2-cc5b-36e4-aaa2-b7f36f46f149.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 104.154.224.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:f0:ac:9f:e0:a1:58:d8:d9:3d:9e:51:6f:2d:91:c9:8e:f6: e6:c7:f9:c9:b8:a9:c8:fe:4f:3b:c8:47:1d:ff:5b:dd:c1:18: 91:fe:f3:b8:f3:93:ed:aa:02:1d:2a:17:03:6a:61:2f:3b:a0: 7f:64:80:2a:60:12:b5:26:41:51:fa:0a:ae:6f:95:87:15:4f: 30:3e:f6:c5:03:67:6b:e7:20:c7:2f:6e:44:56:32:c5:7c:ac: 75:c8:67:27:31:0b:0b:91:28:57:26:71:cf:49:c8:f7:ba:14: 67:62:c6:7f:14:da:da:4d:48:b8:81:2a:51:e1:65:3f:8d:8d: 63:32:ca:ab:82:19:7a:38:c5:da:d6:d7:0a:bb:34:f5:1f:01: 79:28:4c:0f:2d:26:60:a1:b9:e4:15:c6:98:15:3d:33:60:8c: fa:8e:d3:08:58:cb:27:40:da:fa:26:61:97:c1:e7:5a:e1:f9: c4:a6:73:41:be:7b:70:5c:92:81:fe:54:8a:4e:5e:f9:15:7a: 29:57:58:92:da:72:bb:e9:1a:7d:e7:22:17:e3:ab:c9:98:32: fd:42:cb:8c:7d:5f:83:20:7b:f7:0e:19:10:bd:91:ae:ef:03: ea:13:54:3b:d0:83:f5:7e:12:21:bb:bc:b6:b1:80:8c:49:33: c7:7b:6e:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtfN211ThjDJmsL9SAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MTAwMTAxMDAzMloXDTI1MTIzMDAyMDAzMlowLzEtMCsGA1UEAxMk NDNmNzdiYTgtMGQzMC00ODNhLWFjNWItMzA2ZDdkYzE5Nzc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8MygJNcglxP6imEURsBvQCrI7NXgs3IXC37H dEvrzHfi9H45bIOBGfj1fN4/locIvx5CEgoAXr8LzNDTLfeV4YQnhm4HLZxlFtTM nO/H5KutKD7KDEmrOlE62YkzDnKU9kl5g1V1KyNR1nt+GPQ1345MHFkk5bXiwHQA Zn44Zjo9Qr6Mc3MsNY7hkCd9k2LqBL00aL8Wi1WT4dBfNcCgqm7P1OSa/kjhR5ah HhUY7pUZ1kHkYxAhOAgF6WIb3VQNsGTlJ0rCtzmW1FURcxbkycVVpFQJRHtZBk9a eD5oFkCN+TbDNBbLcIhvOKSgF+xaQF24CO8y0B81CYcfIExlJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLfbgfmamhyaMzhAhrBMsenrpCXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvZGI5OWI0ZjItY2M1Yi0z NmU0LWFhYTItYjdmMzZmNDZmMTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFaJrgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIfwrJ/goVjY2T2eUW8tkcmO9ubH+cm4qcj+TzvIRx3/W93BGJH+87jz k+2qAh0qFwNqYS87oH9kgCpgErUmQVH6Cq5vlYcVTzA+9sUDZ2vnIMcvbkRWMsV8 rHXIZycxCwuRKFcmcc9JyPe6FGdixn8U2tpNSLiBKlHhZT+NjWMyyquCGXo4xdrW 1wq7NPUfAXkoTA8tJmChueQVxpgVPTNgjPqO0whYyydA2vomYZfB51rh+cSmc0G+ e3BckoH+VIpOXvkVeilXWJLacrvpGn3nIhfjq8mYMv1Cy4x9X4Mge/cOGRC9ka7v A+oTVDvQg/V+EiG7vLaxgIxJM8d7bjM= -----END CERTIFICATE-----Generated at Sun Oct 19 23:43:53 2025 by rpki-client